up vote -13 down vote favorite
share [g+] share [fb]

I have recently installed Windows Server 2008 R2 on a system.

Now I want to add a proxy server so that all the clients added to this can only visit the websites I describe.

How can i do this?

link|improve this question
3  
Your tag says 2008 R2, but your question says 2008. Can you please fix this discrepancy. They are very different operating systems. – MDMarra Nov 15 '11 at 17:58
3  
Hello, welcome to Server Fault. Please review the FAQ before posting questions. – TylerShads Nov 15 '11 at 18:06
feedback

closed as not a real question by Massimo, squillman, DJ Pon3, voretaq7♦, mdpc Nov 15 '11 at 18:37

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. See the FAQ for guidance on how to improve it.

2 Answers

up vote 4 down vote accepted

This is an argument of policy and how you treat your employees, but that's a separate issue.

If you're looking at doing something like this, you do it by deploying a proxy server product and using that system as a gateway. @MarkM mentioned Squid, which we've done before,using SquidGuard, but it won't block access to https sites. You'd most likely want a turnkey product that can handle proxying and filtering, using invisible proxying so there are no settings put in by the client machines or policy.

Personally you may run into issues by locking your employees down this much and treating them the way we do unless you have a really good reason to sink management time and money into this level. We do this because we're required by CIPA laws as a school...I'm sure if you're a three letter agency for the government you may have a good reason to do this too. Otherwise you might get some pushback from your employees...or at least turnover. But that's all I'll warn about.

link|improve this answer
I have found certain employees uploading the code to thier gmail server and so and so... and the chating at facebook when i am not in office – Kishore Jangid Nov 15 '11 at 18:19
1  
Again, this is a policy question, not a technical one. You can just pull the plug on the Internet if you wanted. They could just chat with their phones. The key question is whether they're getting the work done or not. Personally I wouldn't care if they're holding a NERF shootout in the office as long as the assigned work was getting done...heck, it might lift morale if they're working hard to keep things rolling. – Bart Silverstrim Nov 15 '11 at 18:22
3  
@kishorejangid GMail and Facebook don't harm productivity; very similar to the fact that guns don't kill people, people kill people. If the employees want to screw off, they'll find a way, facebook or not. If it's impacting productivity, time to get rid of the employee. – Chris S♦ Nov 15 '11 at 18:23
1  
I'm so coming to work for you when you get that shootout going. – squillman Nov 15 '11 at 18:24
1  
You're going to stop someone from reverse engineering the code? If they steal the code, you can sue them. You can probably ask about this in the OnStartups exchange. But if they want to steal your code, A) it came from their heads to start with, B) they could stick the code on USB drives or a number of other ways than GMail. – Bart Silverstrim Nov 15 '11 at 18:25
show 4 more comments
feedback
up vote 7 down vote

There is no Microsoft role built into Server 2008 to make it act like a proxy. You can use TMG, but it's not free. Something like Squid on Windows might be worth looking at, but it's not native to the platform, so it could be kludgey down the road.

Honestly, there is no good step by step guide, as you have requested. Everyone's environment is different. If you don't know how to set up a proxy, or even how to license and install one, I suggest you hire a consultant that has experience with this.

link|improve this answer
5  
@kishorejangid I'm not sure what that has to do with my answer. It certainly doesn't change it. No one here is going to do your job for you. If you don't even have a starting point for how to implement something, then hire someone that does. – MDMarra Nov 15 '11 at 18:04
4  
@kishorejangid Trying to keep your employees on task by blocking websites has been found to be counterproductive in many studies. Further, consider how much time you're investing in blocking the sites. You would be much better off simply requiring employees to complete a certain amount of work in a reasonable time frame; deal with employees who fail to obtain this. – Chris S♦ Nov 15 '11 at 18:09
7  
@kishorejangid You should read the faq and how to ask before posting again. This is a site for professional administrators. As a professional, we assume that when you come here to ask, you will have done research and testing on your own. We expect you to have specific questions with details about what you've tried or what exactly you're trying to accomplish. Your question is amazingly broad and you've, apparently, done no research. It's an insult to us for you to come and ask questions that amount to "do my job for me". – MDMarra Nov 15 '11 at 18:19
1  
why u people down voting my question - because it's a very badly written question and therefore a poor fit for Server Fault's normal question standards. Next question? – DJ Pon3 Nov 15 '11 at 18:22
4  
@kishorejangid No you didn't. Please don't insult us and say that "research" is a few minutes of googling. Research is reading documentation, calling vendors, meeting with sales engineers, etc. I stick by my original comment. We will not do your job for you. We all get paid for our time and voluntarily contribute to this community. We expect that you will have met certain requirements before you ask a question here and the most basic requirement is that you have a clue about what you're asking. – MDMarra Nov 15 '11 at 18:27
show 3 more comments
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.